We are seeing NetBrain fill our firewall logs with build/teardown ICMP connection messages at a rate of more than 70 a minute. Is this normal and how can I make it stop?

Sorry for the late response. The ICMP protocol is used by ping. The amount of the ICMP connections may be very large especially during performing the Live network discovery/Tune Shared Network Settings and benchmark. For an instance, If you perform a Live Network Discovery via Scan IP Range, let me say a subnet with /24 mask, 254 ping sessions will be created at the same time. So I think thephenomenon you described is normal.